Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File:                     _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier:          jym1BQbjWa66R0U/uUiXWZhqQtlTudb7PwSeFbdL13c=
Subject key identifier:   E5:57:85:60:AC:99:68:2E:BE:D4:7F:F9:3D:15:18:50:AF:C6:2E:8A
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer:       /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial:       01977007EF925CBD201940A49507EEEE0899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number:          1332
Signing time:             Sat 14 Jun 2025 20:00:57 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:57 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:57 +0000
Files and hashes:         1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: EhrcOmkoZrc9jdnShbRPj6Zaend92lOrH+N6oxA4rto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:ef:92:5c:bd:20:19:40:a4:95:07:ee:ee:08:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
        Validity
            Not Before: Jun 14 20:00:57 2025 GMT
            Not After : Jun 15 20:00:57 2025 GMT
        Subject: CN=e5578560ac99682ebed47ff93d151850afc62e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:34:7a:2d:0e:4e:55:d2:c1:24:e5:41:59:
                    3d:06:63:8e:4a:97:8b:0b:fc:66:d6:3e:7a:f8:70:
                    3a:da:26:ac:26:25:72:73:87:e5:43:7f:2e:65:2b:
                    fe:b9:4d:d1:7d:4f:50:2d:93:0d:0f:ea:11:ae:a5:
                    f9:b4:87:59:27:6f:4b:74:1e:93:33:5a:5f:f2:9b:
                    fc:40:4d:aa:56:4a:d7:0b:fd:3e:27:33:a5:1f:76:
                    c7:2a:b9:8b:2a:74:e5:55:82:05:63:65:d2:3b:96:
                    c8:dd:94:54:71:c1:b0:9b:e2:f4:72:13:8f:2f:46:
                    9c:31:0b:a5:c2:b8:0e:7b:64:f5:4a:69:02:86:ec:
                    67:73:fb:82:26:82:56:d6:d9:71:6a:4e:92:a6:88:
                    6e:69:2a:b5:78:1c:0f:e1:a4:46:0b:a9:70:06:76:
                    0c:2f:20:ff:f8:02:3f:b0:f7:34:66:e7:0f:79:46:
                    f0:da:4e:93:6e:81:10:5e:17:34:98:e3:c5:9e:63:
                    22:46:3d:b2:f1:db:c3:fe:17:68:0b:24:a6:04:d2:
                    ac:dc:8f:c7:a4:2a:86:d7:8a:97:35:9c:32:6f:90:
                    28:72:80:44:1b:cd:42:2e:56:33:8a:11:9c:d2:b0:
                    d3:0b:d5:84:34:e5:84:d3:30:7d:86:0e:94:e0:a7:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:57:85:60:AC:99:68:2E:BE:D4:7F:F9:3D:15:18:50:AF:C6:2E:8A
            X509v3 Authority Key Identifier:
                keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e0:66:8d:01:2e:cf:5e:96:d3:4f:76:f4:75:2f:bf:a5:b8:
         37:08:9d:93:1f:de:98:8c:21:cc:ac:ef:8e:28:de:58:aa:a6:
         80:2c:b1:1e:87:0a:d0:ab:79:09:3a:e9:9c:f8:bc:5b:f5:ce:
         67:97:ae:99:fa:9b:63:5c:2d:5e:2a:09:b1:70:6b:3c:a5:d9:
         c3:a9:5a:9a:9e:83:bb:a2:76:a2:f5:18:c4:6e:b9:c5:bb:30:
         51:d0:ba:b4:8d:ff:a5:23:3d:65:48:67:d6:c5:37:21:57:8c:
         31:b7:3c:01:7d:f3:19:8f:f8:94:c8:75:40:6b:d7:9d:d9:71:
         8c:b6:39:53:de:02:e7:12:2f:4d:3c:39:63:6d:42:a2:c1:94:
         ca:8e:f8:62:f7:c0:ad:70:8b:d2:54:a4:2e:80:3c:4e:c8:ad:
         72:e2:d3:d2:76:52:fb:5a:16:1e:65:cc:b9:97:cc:1e:ad:09:
         bf:95:ab:c1:ee:71:28:ee:6d:5c:64:7f:d1:c6:2b:27:14:ba:
         04:12:c4:fd:e8:62:de:52:4b:ef:22:26:10:08:0a:43:25:3a:
         9e:6c:c0:25:dc:d7:19:02:3c:bb:fd:1a:4b:6b:c4:93:5b:07:
         5e:31:0b:93:67:a5:57:2c:a6:42:2d:64:bd:1c:89:e6:5e:8f:
         f0:24:1a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:20 2025 by rpki-client